CVE-2026-43140
MediumSummary
A vulnerability has been identified and resolved in the Linux kernel. It concerns the HID Magic Mouse, which can cause system crashes when the input pointer is missing.
Risk Assessment
Organizations may experience operating system crashes, leading to downtime and potential data loss. Specifically, attackers could exploit fake USB devices to trigger this issue.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability. Additionally, monitoring USB devices for potential threats is advised.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc->input Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, msc->input stays NULL, leading to a crash at a later